Malicious code in cmf.mes.recipe (npm)

The package cmf.mes.recipe was found to contain malicious code...